This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: 14FUi83ADdWf4PtZPdI1ZKTV+Z3MDR0IaEPEJ3irHfk= Subject key identifier: 52:F6:0C:15:3B:2F:95:13:AF:D8:5B:F3:ED:3D:B5:7A:80:D8:27:3F Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 01D6 Signing time: Fri 19 Dec 2025 02:19:35 +0000 Manifest this update: Fri 19 Dec 2025 02:19:35 +0000 Manifest next update: Fri 26 Dec 2025 02:19:35 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: ZA20dn+d6eTennudmo80gDBLF2n4YkTgkvJ4uGLZ/YE=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: uvZ2Q94gPhmYQwiI4YLVYozC9g+L2KL5OS58nY+uLv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Dec 19 02:19:35 2025 GMT Not After : Dec 26 02:19:35 2025 GMT Subject: CN=6944b637-4638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:1a:e1:73:b4:a8:1e:a7:fb:73:14:19:1a: d5:d2:fd:5d:c5:51:6b:aa:85:29:8b:04:aa:31:e7: a8:8b:86:d4:f7:b8:7f:a5:4c:8f:14:e8:51:36:2d: a2:aa:d1:90:b1:95:2c:57:b6:74:94:b4:a0:69:fa: 4d:4a:38:b8:19:2b:94:c5:ff:d6:e2:42:d2:53:b3: 55:63:eb:4e:72:28:7f:14:29:87:14:5b:ed:a5:d8: 4d:a0:e3:8e:c2:38:b2:0a:57:65:1b:5e:31:60:8b: 41:8c:d1:b0:1c:a5:41:75:4a:7b:cb:64:34:9c:2f: ec:8e:45:a6:8f:18:c3:dd:ea:37:cf:8c:47:8c:75: 72:5f:70:fd:72:b5:1e:79:6b:32:72:9c:ce:9b:7c: d1:27:a9:f7:e3:d2:9e:92:50:8f:30:2e:0e:e9:97: fd:a1:77:e8:f4:cc:ca:02:16:3b:aa:37:bd:3c:c1: 43:1b:d4:a6:ae:23:02:ac:cc:2c:62:ec:1b:2d:b1: 92:89:38:5a:3a:a1:64:ec:a1:1e:0f:84:ff:59:3c: 92:1a:c8:89:ae:a8:c6:88:a7:55:56:0c:54:76:9a: f3:f7:c3:92:c6:ba:53:7e:59:d7:39:77:35:f0:11: b1:f9:53:de:90:f6:8d:7d:8f:ec:14:b1:84:5c:3b: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F6:0C:15:3B:2F:95:13:AF:D8:5B:F3:ED:3D:B5:7A:80:D8:27:3F X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3e:f2:77:ff:8d:20:31:f0:e4:dd:3f:73:93:63:a1:3f:a6: b8:67:22:a6:7a:59:2b:4a:86:db:98:82:81:4e:b9:d8:db:85: d7:f8:08:27:0f:56:92:52:fb:62:aa:2e:c9:25:d2:02:58:f9: 97:a0:0c:63:2c:ad:6e:2a:e0:8e:fc:40:3b:c9:a9:c3:20:90: 8c:e9:bc:a9:2f:2e:9e:2a:17:3f:15:13:f7:b6:ae:2e:7a:62: 81:27:28:70:69:6e:45:d9:db:40:f4:a4:cb:aa:8f:e3:be:3f: 2c:2f:eb:68:17:f6:12:c9:2c:08:ae:3c:fc:de:95:e2:04:2c: 4d:3f:ac:25:21:97:f4:ef:06:96:d8:b0:d7:db:1b:af:4d:c1: a2:c4:14:5b:62:01:7e:c3:e5:70:2f:70:21:42:cf:b8:f7:28: 37:4c:f8:bd:32:10:32:0c:3c:7a:97:e6:d5:82:0b:42:94:eb: 0f:5c:13:50:c5:0b:75:61:2c:a1:a1:a5:04:45:fe:e1:31:d0: 89:ca:43:bd:1c:5e:1e:6d:2f:57:ec:85:82:9e:95:1e:a8:d5: ec:bc:3f:cf:fe:2e:e1:fa:ce:1b:83:b9:80:ea:3b:9a:42:d5: fb:6c:19:d1:5a:17:9a:94:01:14:1f:ab:ea:ff:2c:7d:59:1d: d2:b0:c2:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUxMjE5MDIxOTM1WhcNMjUxMjI2MDIxOTM1WjAYMRYwFAYD VQQDDA02OTQ0YjYzNy00NjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseYa4XO0qB6n+3MUGRrV0v1dxVFrqoUpiwSqMeeoi4bU97h/pUyPFOhRNi2i qtGQsZUsV7Z0lLSgafpNSji4GSuUxf/W4kLSU7NVY+tOcih/FCmHFFvtpdhNoOOO wjiyCldlG14xYItBjNGwHKVBdUp7y2Q0nC/sjkWmjxjD3eo3z4xHjHVyX3D9crUe eWsycpzOm3zRJ6n349KeklCPMC4O6Zf9oXfo9MzKAhY7qje9PMFDG9SmriMCrMws YuwbLbGSiThaOqFk7KEeD4T/WTySGsiJrqjGiKdVVgxUdprz98OSxrpTflnXOXc1 8BGx+VPekPaNfY/sFLGEXDt0lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFL2DBU7 L5UTr9hb8+09tXqA2Cc/MB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBPvJ3/40gMfDk3T9zk2OhP6a4ZyKmelkrSobbmIKBTrnY24XX+Agn D1aSUvtiqi7JJdICWPmXoAxjLK1uKuCO/EA7yanDIJCM6bypLy6eKhc/FRP3tq4u emKBJyhwaW5F2dtA9KTLqo/jvj8sL+toF/YSySwIrjz83pXiBCxNP6wlIZf07waW 2LDX2xuvTcGixBRbYgF+w+VwL3AhQs+49yg3TPi9MhAyDDx6l+bVggtClOsPXBNQ xQt1YSyhoaUERf7hMdCJykO9HF4ebS9X7IWCnpUeqNXsvD/P/i7h+s4bg7mA6jua QtX7bBnRWhealAEUH6vq/yx9WR3SsMKQ -----END CERTIFICATE-----Generated at Sat Dec 20 17:16:08 2025 by rpki-client